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A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) OR THIRTY (30) DAYS, 
WHICHEVER IS LONGER, FROM THE MAILING DATE OF THIS COMMUNICATION. 
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DETAILED ACTION 

An Appeal Conference was formed and conferee agreed that although Brundrett discloses 
the encrypted block list, which corresponds to the directory data, Brundrett does not disclose 
storing the encrypted directory in the security object, the finality of the office action 05/06/05 is 
now withdrawn. 

In view of the appeal brief filed on 08/18/05, PROSECUTION IS HEREBY 
REOPENED. A new ground of rejection is set forth below. 

To avoid abandonment of the application, appellant must exercise one of the following two 
options: 

(1) file a reply under 37 CFR 1.111 (if this Office action is non- final) or a reply under 37 CFR 
1.1 13 (if this Office action is final); or, 

(2) request reinstatement of the appeal. 

If reinstatement of the appeal is requested, such request must be accompanied by a supplemental 
appeal brief, but no new amendments, affidavits (37 CFR 1.130, 1.131 or 1.132) or other 
evidence are permitted. See 37 CFR 1.193(b)(2). 

Claim Rejections - 35 USC § 103 
The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this tide, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 
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Claims 1 uf rejected under 35 U.S.C. 103(a) as being unpatentable over Moore 
(6,678,700) in view of Moskowitz (20020071556 Al) and Kaplan (IBM Cryptolopes, 
SuperDistribution and Digital Rights Management). 

In reference to claims 1 and 13, Moore et al (6,678,700) discloses a method of receiving 
at the meta-data server an open-file request that is created by the application (distributed file 
interface coupled to the client; column 6 lines 36-45), the open- file request specifying a name of 
a first file, wherein the first file includes a first set of blocks (column 6 lines 13-45 in 
combination with column 18 lines 23-28). The request for the resource would include the name 
of the file (Fig. 7 part 40). During the creation of the Meta data creation of normal objects is 
used to put data objects into a container at the SRB server (meta data server) (column 18 lines 
37-46), thus creating an object in response to the open-file request. Moore discloses writing the 
data to the copy then updating the container. This is the function of transmitting the object to the 
file interface because the client and the server have the same copy of the information on the file 
interface. 

However Moore does not disclose generating an encryption key at the meta-data server 
and the storage server. 

Moskowitz et al teaches the generation of partial keys at different entities (page 3 
paragraph 0023). The first key creator creates the first part of the key and corresponds to the 
meta-data server and the second key creator creates the second part of the key and corresponds to 
the storage server (page 2 paragraph 0015). 
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At the time the invention was made, it would have been obvious to a person of ordinary 
skill in the art to use partial keys created at different servers as in the system of Moskowitz and 
adding the keys to the data portion of the object in the system of Moore, thus creating a security 
object. One of ordinary skill in the art would have been motivated to do this because sharing the 
secret between more devices increases the amount of security since both values are required fore 
decrypting the message. 

Moore and Moskowitz do not disclose adding the generated keys and the block list to the 
security object. 

The system of the Kaplan discloses a system for digital rights management that 
comprises a distributed file system (Fig on page 6). The system adds the block list, which 
corresponds to the lists of parts, to the security object (Bill of Materials page 5 paragraph 3). 
The security object is transmitted to a distributed file interface (paragraph 3 page 6). 

At the time the invention was made, it would have been obvious to a person of ordinary 
skill in the art to store the key of Moskowitz and the list in the security object, Cryptolope, of 
Kaplan within the network of Moore. One of ordinary skill in the art would have been motivated 
to do this because it would protect content and track its usage, and to fairly and efficiently 
distribute royalties and licensing fees (SuperDistribution of Cryptolopes to the rescue.. . page 1). 
The list of Kaplan is not encrypted, however at the time the invention was made, it would have 
been obvious to a person of ordinary skill in the art to encrypt the list of parts for the cryptolope. 
One of ordinary skill in the art would have been motivated to do this because it adds more 
security to the authentication of the information for a cryptolope, since only the person with the 
key would be able to encrypt the system so that authentic key users can decrypt the list and 
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therefore authenticate the contents; and further the cryptolope is encrypted therefore it is just one 
more level of encryption. 

Claims 2-3 and 8 are rejected under 35 U.S.C. 103(a) as being unpatentable over Moore, 
Moskowitz, and Kaplan as applied to claim 1 above, and further in view of Brundrett et al. 
(6,249,866). 

In reference to claim 2, Moore discloses transmitting a file access request and security 
object from the distributed file system interface to the storage server in response to a file access 
request from a client application (column 6 lines 36-48), the file access request including an 
operation code and a reference to selected data of a file (column 19 lines 33-39); 

Moore and Moskowitz do not disclose decrypting the block list at the storage server in 
response to thejile access request; providing access to the selected data in accordance with the 
operation code upon successful decryption of the block list. 

Brundrett discloses decrypting the text for the NTFS in response from a request from an 
application and thereby providing access to the selected data upon successful decryption (column 
17 lines 6-34). 

At the time the invention was made, it would have been obvious to a person of ordinary 
skill in the art to decrypt the file as in Brundrett in the system of Moore. One of ordinary skill in 
the art would have been motivated to do this because decryption makes the encrypted data 
available to the user. 
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In reference to claims 3, 8, Brundrett further discloses encrypting file data at the 
distributed file interface for file write operations using the encryption key in the security object; 
and decrypting file data at the distributed file interface for file read operations using the 
encryption key in the security object (Fig. 17 and Fig. 20). 

At the time the invention was made, it would have been obvious to a person of ordinary 
skill in the art to encrypt the file as in Brundrett and adding the encrypted information to the data 
portion of the object in the system of Moore. One of ordinary skill in the art would have been 
motivated to do this because encryption secures the information. 

Allowable Subject Matter 

Claims 4-7, and 9-12 are objected to as being dependent upon a rejected base claim, but 
would be allowable if rewritten in independent form including all of the limitations of the base 
claim and any intervening claims. 

Claims 14-16 are allowed. 

Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Paula W. Klimach whose telephone number is (571) 272-3854. 
The examiner can normally be reached on Mon to Thr 9:30 a.m to 5:30 p.m. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kim Vu can be reached on (571) 272-3859. The fax phone number for the 
organization where this application or proceeding is assigned is 703-872-9306. 



Application/Control Number: 09/838,759 Page 7 

Art Unit: 2135 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 



